Ensure default protection is configured at the array level and for every pod

Trung bìnhCấp 1Xem xét thủ côngflasharray

Mô tả

FlashArray allows the array and its pods to have default protection configured. This allows you to configure pgroups that will be automatically associated with any volumes created within the pod or the array. This can be used to ensure that all block data has some level of data protection by default. Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

From the CLI: ; Run the command purearray default-protection list to view the default protection group lists for the array root (denoted by - in the Container Name column) and all pods. ; Run the command purepgroup list --retention-lock to verify that the SafeMode status is ratcheted and manual eradication is disabled for the protection groups assigned as defaults.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

To align with the security recommendations, assign a ratcheted protection group to the array root and all pods so that newly provisioned data receives baseline SafeMode protection automatically. From the GUI: ; Navigate to Protection > Array. ; In the Default Protection panel, click the Edit (Set Default Protection) icon on the right of the appropriate row (the - row for the root of the array, or the row for a specific pod). ; In the Available Protection Groups column, select the protection groups to be added so they appear in the Selected Protection Groups column. ; Click Set. ; Navigate to Protection > Protection Groups and select your assigned default protection group.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: flasharraystoragedata-protection
Tham chiếu: CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 4.4 Ensure default protection is configured at the array level and for every pod